Bug#603450: Is 603450 realy release critical?

2010-12-09 Thread gregor herrmann
On Wed, 08 Dec 2010 08:45:30 +0100, Alexander Reichle-Schmehl wrote: > There's patch floating arround, which has a major regression: It doesn't > work for users of self signed certificates. FWIW: As an offlineimap user I'd be very unhappy if it stopped working with my IMAP server with its self-si

Bug#606587: epos: affected by privilege escalation vulnerability in logrotate

2010-12-09 Thread Florian Zumbiehl
Package: epos Version: 2.5.37-8 Severity: grave Justification: privilege escalation vulnerability Tags: security There was a privilege escalation vulnerability in logrotate that I reported about four years ago and which finally got fixed in testing rouhgly one year ago (see bug #388608). In lenny